This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/hhz-m34uLzjhktM1lB36_JlRofM.roa File: hhz-m34uLzjhktM1lB36_JlRofM.roa (raw, json) Hash identifier: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs= Subject key identifier: 86:1C:FE:9B:7E:2E:2F:38:E1:92:D3:35:94:1D:FA:FC:99:51:A1:F3 Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Certificate serial: 019B797DFEB63A0A5BC98B2B5969ABE5945B Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/hhz-m34uLzjhktM1lB36_JlRofM.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 185.45.120.0/23 maxlen: 23 185.45.123.0/24 maxlen: 24 2a01:7ee0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fe:b6:3a:0a:5b:c9:8b:2b:59:69:ab:e5:94:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=861cfe9b7e2e2f38e192d335941dfafc9951a1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:34:59:dd:3f:1a:66:85:6d:18:44:24:13: 41:68:83:55:3b:07:78:73:c7:70:18:5a:50:57:45: f3:70:d6:3b:32:e9:8d:df:f3:cf:cb:f0:34:ad:13: e2:fe:1a:41:be:3a:58:23:5f:f0:6c:8a:2e:00:90: a3:13:af:ba:d6:ed:24:90:8b:7f:98:59:f5:cd:3e: 5f:33:3d:50:28:41:df:63:93:0f:71:62:f8:84:02: 30:8d:35:d7:8a:15:8f:8e:06:ea:30:f8:3c:dd:c0: 8c:fc:b7:2b:4c:6d:ab:83:3d:ce:6a:60:e2:11:30: 18:8f:ce:03:55:4a:3a:b8:89:4e:fa:d9:23:ab:8e: db:7f:f3:53:3e:f0:1e:c0:8b:71:b3:41:f6:39:2e: fb:25:5b:fb:21:c5:6d:e8:6a:f2:a2:18:9a:75:5d: 1f:a1:8a:80:1d:35:dd:0e:a5:77:4a:d1:94:19:3d: d0:10:47:57:d3:20:93:cf:13:ed:5b:60:d5:4d:75: 65:99:a9:a2:c7:f8:39:5e:92:42:25:98:ce:70:89: 0f:9d:56:16:cf:83:6d:8a:ac:15:05:bb:80:16:21: 91:3c:8d:ac:72:dd:d2:73:d0:c2:08:61:c1:33:04: 5f:03:91:e2:2a:f4:83:d2:e5:50:39:d3:ad:b9:bc: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:FE:9B:7E:2E:2F:38:E1:92:D3:35:94:1D:FA:FC:99:51:A1:F3 X509v3 Authority Key Identifier: keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/hhz-m34uLzjhktM1lB36_JlRofM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.120.0/23 185.45.123.0/24 IPv6: 2a01:7ee0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:24:b3:e2:12:81:3d:99:2d:2a:a5:01:5e:84:92:b1:bd:11: d2:e5:dc:f0:b0:63:ec:44:11:cf:9a:11:5a:26:53:a2:a3:5d: 28:0d:05:58:d0:98:2c:90:be:b4:a6:72:72:58:f6:0b:75:58: d6:67:ff:6c:78:4e:ed:39:e4:f1:f3:43:72:32:6c:5b:0e:70: 2f:9e:1d:a9:56:65:36:a2:b5:26:6b:03:11:e6:79:72:96:6b: 58:14:8d:63:b0:7c:fb:06:8b:56:67:9b:a7:5e:e8:e0:c5:ae: bb:0c:de:4b:8f:88:3a:72:16:ba:a5:8e:47:b3:05:65:82:16: 49:f0:2d:ab:6d:11:fe:14:99:83:ae:f8:7e:28:b1:96:a8:8b: fa:42:0a:d0:02:7a:db:bd:dd:95:64:86:8e:f1:aa:6c:5f:86: c4:22:55:ff:40:5e:5c:70:8a:85:41:52:0e:aa:e5:6c:0a:d6: 0e:49:c2:dc:cd:d3:34:2a:a4:4b:c1:1e:3a:bf:f2:77:a7:43: 44:6d:33:35:a8:cc:ba:84:0d:a6:21:ba:d1:50:8b:42:aa:94: 5d:97:28:21:28:fe:35:5b:4c:71:79:98:c8:48:27:bb:af:e7: 65:4c:ac:86:23:81:4c:f4:b0:32:95:82:ef:94:12:8d:d8:7d: 8d:3b:3a:b7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5ff62OgpbyYsrWWmr5ZRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2 ZDlkZTEwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjFjZmU5YjdlMmUyZjM4ZTE5MmQzMzU5NDFkZmFmYzk5NTFhMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWE0Wd0/GmaFbRhEJBNBaINVOwd4 c8dwGFpQV0XzcNY7MumN3/PPy/A0rRPi/hpBvjpYI1/wbIouAJCjE6+61u0kkIt/ mFn1zT5fMz1QKEHfY5MPcWL4hAIwjTXXihWPjgbqMPg83cCM/LcrTG2rgz3OamDi ETAYj84DVUo6uIlO+tkjq47bf/NTPvAewItxs0H2OS77JVv7IcVt6GryohiadV0f oYqAHTXdDqV3StGUGT3QEEdX0yCTzxPtW2DVTXVlmamix/g5XpJCJZjOcIkPnVYW z4NtiqwVBbuAFiGRPI2sct3Sc9DCCGHBMwRfA5HiKvSD0uVQOdOtubykrQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIYc/pt+Li844ZLTNZQd+vyZUaHzMB8GA1UdIwQY MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt MDA1ODc3ZGE4MDI2LzEvaGh6LW0zNHVMempoa3RNMWxCMzZfSmxSb2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2 LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBuS14AwQA uS17MA8EAgACMAkDBwAqAX7gAAAwDQYJKoZIhvcNAQELBQADggEBAAsks+ISgT2Z LSqlAV6EkrG9EdLl3PCwY+xEEc+aEVomU6KjXSgNBVjQmCyQvrSmcnJY9gt1WNZn /2x4Tu055PHzQ3IybFsOcC+eHalWZTaitSZrAxHmeXKWa1gUjWOwfPsGi1Znm6de 6ODFrrsM3kuPiDpyFrqljkezBWWCFknwLattEf4UmYOu+H4osZaoi/pCCtACetu9 3ZVkho7xqmxfhsQiVf9AXlxwioVBUg6q5WwK1g5JwtzN0zQqpEvBHjq/8nenQ0Rt MzWozLqEDaYhutFQi0KqlF2XKCEo/jVbTHF5mMhIJ7uv52VMrIYjgUz0sDKVgu+U Eo3YfY07Orc= -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:23 2026 by rpki-client